Skip to main content
Glama
CoveoSec

xsiam-mcp

by CoveoSec
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

Related Servers

Alternatives to xsiam-mcp

No user-submitted related servers found.

    Related Servers

    • QRadar MCP Server

      caohonghoa98
      F
      license
      Not graded
      quality
      C
      maintenance
      Bridges LLMs to IBM QRadar SIEM via 4 intelligent MCP tools covering 728 REST API endpoints, enabling natural language queries for offenses, assets, rules, and more.
      -

    • MCP-SOC Middleware

      funphp
      A
      license
      Not graded
      quality
      D
      maintenance
      Enables AI agents to interact with Splunk SIEM and TheHive SOAR through a unified MCP interface, providing 12 tools for alert triage, case management, and security operations.
      MIT

    • eSentire Atlas MCP Server

      omichelbraga
      F
      license
      A
      quality
      B
      maintenance
      Exposes eSentire Atlas API (Findings, Ticketing, MVS) and Threat Intelligence feeds (IP Watch, Advanced/STIX) as MCP tools, enabling security operations and threat intelligence queries through natural language.
      29
      -

    • Cortex XSIAM MCP Gateway

      ciaran-finnegan
      F
      license
      Not graded
      quality
      B
      maintenance
      Enables governed agent access to Cortex XSIAM security operations APIs, including XQL log search, issues, cases, endpoints, and assets, with dataset authorization and optional identity-based access control.
      -

    • cybersec-mcp

      xu-c0
      F
      license
      Not graded
      quality
      D
      maintenance
      Enables Claude or any MCP-compatible client to execute cybersecurity workflows like incident response, cloud audits, and pentests by calling tools with 323 prompts across 8 categories.
      -

    • tenable-mcp

      nguyenthdat
      A
      license
      A
      quality
      C
      maintenance
      Exposes Tenable security operations as MCP tools for AI-powered security workflows, enabling asset, vulnerability, scan, plugin, and tag management via natural language.
      17
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    B3.1/5.0

    Scored across 132 tools

    Disambiguation4/5

    Most tools are clearly differentiated by resource and action, but a few close pairs (healthcheck vs xsiam_health, dataset_* vs xql_* dataset tools, v1/v2 alert variants) could cause misselection.

    Naming Consistency3/5

    The naming is mostly snake_case with a domain prefix, but the ordering of action and resource varies (e.g., incidents_update_incident vs tags_agents_assign), and some tools have version prefixes or standalone names (healthcheck, get_risk_score), creating inconsistency.

    Tool Count1/5

    With 132 tools, the server is far beyond the recommended range and poses a significant navigation burden for agents, even with a discovery tool.

    Completeness4/5

    The tool set comprehensively covers the major XSIAM domains including incidents, alerts, endpoints, assets, XQL, scripts, and configuration, with only minor lifecycle gaps (e.g., no incident creation) that are reasonable given the platform.

    Maintenance

    ActivityStale
    ResponsivenessNo issues

    Resources